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1 . 0  INTRODUCTION 


This  report  provides  a  System  Hazard  Analysis  (SHA)  of  the  Ride 
Motion  Simulator  (RMS)  located  at  the  United  States  Army  Tank- 
Automotive  Command  (TACOM)  in  Warren,  Michigan.  It  also  provides 
the  U.S.  Army  Test-Evaluation  Command  with  component  descriptions 
and  hazard  analyses  of  the  RMS. 

The  Ride  Motion  Simulator  was  designed  to  include  provisions  for 
safeguarding  personnel.  Safety  devices  have  been  located  on  the 
equipment  where  necessary  and  are  described  in  TACOM  Technical 
Report  No.  13464,  "USER'S  MANUAL  FOR  THE  RIDE  MOTION  SIMULATOR." 

This  System  Hazard  Analysis  (SHA)  is  submitted  concurrently  with  a 
Safety  Analysis  Report  (SAR)  in  an  effort  to  obtain  a  safety  release 
for  the  Ride  Motion  Simulator. 

The  scope  of  this  System  Hazard  Analysis  is  the  systematic 
assessment  of  real  and  potential  hazards  associated  with  the 
sybsystems  of  the  Ride  Motion  Simulator.  This  SHA  was  conducted  on 
the  available  system  concept  data  in  an  attempt  to  identify  hazards 
and  then  direct  design  efforts  toward  the  elimination  or  control  of 
the  identified  hazards. 

2 . 0  OBJECTIVES 

The  primary  goal  is  to  obtain  a  Safety  Release  from  the  U.S.  Army 
Test  and  Evaluation  command.  This  report  is  issued  in  conjunction 
with  TACOM  Technical  Report  No.  13470,  "SAFETY  ASSESSMENT  OF  TACOM' s 
RIDE  MOTION  SIMULATOR"  and  TACOM  Technical  Report  No.  13464,  "USER'S 
MANUAL  FOR  THE  RIDE  MOTION  SIMULATOR"  in  an  attempt  to  satisfy  MIL- 
STD-882B. 

3.0  CONCLUSIONS 

All  known  safety  hazards  have  been  evaluated  throughout  the  analysis 
of  the  Ride  Motion  Simulator.  The  system  is  considered  safe  to 
operate  as  long  as  the  procedures  stated  in  the  "USER' s  MANUAL  FOR 
THE  RIDE  MOTION  SIMULATOR"  are  followed. 

The  safety  devices  and  procedures  for  the  Ride  Motion  Simulator  will 
reduce  the  probability  of  injury  to  occupant  or  damage  to  equipment 
to  the  levels  dictated  in  MIL-STD-882B. 

4.0  RECOMMENDATIONS 

Upon  issuance  of  a  safety  release  for  the  Ride  Motion  Simulator,  it 
is  suggested  that  the  Safety  Office  at  TACOM  be  given  power  to 
approve  various  test  setups  and  issue  safety  releases  for  them. 

5.0  DISCUSSION 

System  Description 


5.1 
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The  Ride  Motion  Simulator  is  fundamentally  a  platform  mounted  in  a 
framework  such  that  four  motions  (four  degrees  of  freedom)  can  be 
imparted  to  it  simultaneously:  linear  motion  along  the  vertical 
axis;  rotational  motion  about  the  vertical  axis  (yaw) ;  rotational 
motion  about  the  transverse  axis  (pitch) ;  and  rotational  motion 
about  the  longitudinal  axis  (roll) .  The  motions  are  generally 
oscillatory  in  nature  and  comparable  to  the  motions  experienced  in 
the  crew  compartment  of  a  wheeled  or  tracked  vehicle  under  mild  to 
severe  off-road  operating  conditions.  The  platform  is  large  enough 
to  allow  simulation  of  a  crew  station  or  to  simply  evaluate  a 
seating  configuration.  Investigations  can  be  conducted  on  human 
tolerance  to  vibrations  in  general  or  on  task  performance  in  a 
vibrational  environment. 

In  the  current  configuration  the  input  signals  are  generated  from 
computer  data  files  created  on  a  CRAY-2  supercomputer  using  computer 
simulation  of  an  army  vehicle  operating  over  specific  terrain 
profile  courses  (APG,  Ft.  Knox,  etc.).  These  files  are  then 
modified  and  used  to  drive  the  Ride  Motion  Simulator  using  a  micro- 
VAX  II  computer.  With  this  configuration,  a  wide  range  of  vehicles, 
courses,  and  seatings  (gunners,  commanders,  drivers,  etc.)  can 
easily  be  simulated  and  recreated  on  the  Ride  Motion  Simulator. 

5 . 2  Major  Subsystems  and  Components 

The  RMS  is  described  under  the  following  equipment  categories: 
(Figures  5-1  through  5-9  are  photographs  of  the  RMS  and  associated 
equipment) . 

®  Computer  Automated  Measurement  and  Control  (CAMAC)  Computer 
System. 

°  Electronic  conditioning  modules. 

°  Pneumatic  control  panel. 

°  Motion  system. 

°  Hydraulic  control  panel. 

5 . 3  Analysis  Summary 

The  analysis  results  presented  on  the  following  pages  address  the 
hazard  potential  to  the  Ride  Motion  Simulator  should  there  be  a 
failure  in  any  of  the  sybsystems.  The  hazards,  due  to  a  structural 
failure,  were  analyzed  by  Structural/Kinematics  of  Troy,  MI,  under 
contract  #DAAE07-84-R047  and  are  presented  in  TACOM  Technical  Report 
#13150,  "STRUCTURAL  ANALYSIS  OF  TACOM  RIDE  SIMULATOR." 

5 . 4  Assignment  of  Risk  Assessment  Codes 

The  accompanying  analysis  sheets  contain  hazard  severity  levels, 
hazard  probability  levels  and  Risk  Assessment  Codes  (RAC) .  The 
hazard  probability  levels  and  RAC  are  from  AR  385-10  Interim  Change 
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No.  lOl.  The  hazard  severity  levels  are  from  MIL-STD-882B,  so  that 
system  damage  and  personnel  injury  can  be  included  in  the  definition 
and  reflected  in  the  hazard  assessment. 


HAZARD  SEVERITY 

a.  Category  I  -  Catastrophic.  May  cause  death  or  system 
loss. 

b.  Category  II  -  Critical.  May  cause  severe  injury, 
severe  occupational  illness,  or  major  system  damage. 

c.  Category  III  -  Marginal.  May  cause  minor  injury, 
minor  occupational  illness,  or  minor  system  damage. 

d.  Category  IV  -  Negligible.  Will  not  result  in  injury, 
occupational  illness,  or  system  damage. 

HAZARD  PROBABILITY 
A  -  Likely  to  occur  immediately 
B  -  Probably  will  occur  in  time 
C  -  Possible  to  occur  in  time 
D  -  Unlikely  to  occur 

RISK  ASSESSMENT  CODES 

1  -  Critical 

2  -  Serious 

3  -  Moderate 

4  -  Minor 

5  -  Negligible 


5 . 5  Safety  Analysis  of  the  Ride  Motion  Simulator 

The  hazard  evaluation  of  the  RMS  is  made  with  a  higher  degree  of 
confidence  than  would  be  expected  for  an  entirely  new  system.  The 
basic  hardware,  as  related  in  the  User's  Manual  for  the  Ride  Motion 
Simulator,  has  been  in  existence  since  the  late  50' s  and  has  been  in 
its  present  location  in  Bldg.  215  since  1972.  During  it's  nearly  30 
year  existence,  it  has  been  used  in  various  ride-  and  task-oriented 
studies  involving  human  participants.  In  the  entire  history  of  the 
simulator,  no  injuries  have  been  documented.  Thus,  based  on 
historical  data,  the  RMS  could  be  considered  rather  nonhazardous . 
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The  technological  upgrading  that  has  taken  place  recently  is 
oriented  at  meeting  the  more  stringent  criteria  that  have  developed 
in  a  highly  safety-conscious  society.  Additionally,  the 
introduction  of  more  sophisticated  input  techniques  have  also  led  to 
new  failure  paths  not  found  in  earlier  iterations  of  the  simulator. 

The  hazard  assessment  is  divided  into  two  parts  as  follows: 

°  A  general  overview  of  basic  hazards. 

®  An  analysis  of  each  possible  hazard,  failure  probability  and 
backup  systems . 

5.5.1  General.  The  simulator  is  located  in  a  large,  air- 
conditioned  building  built  in  1972,  which  was  designed  as  a 
laboratory  for  the  investigation  of  tracked  and  wheeled  vehicle 
suspensions.  Facilities  exist  for  testing  components  and  complete 
systems  up  to  the  size  of  a  main  battle  tank  turret  or  heavy  truck 
(40  tons) .  The  building  is  equipped  with  a  high-capacity  electrical 
system  (480,  240  &  120  VAC) ,  a  central  hydraulic  system  and  a 
central  compressed  air  system.  The  simulator  is  located  in  a 
medium-sized  room  shared  with  CRAY  research  personnel.  The  room  has 
fluorescent  lighting  and  an  acoustic  ceiling.  Both  the  sound  and 
lighting  levels  were  found  to  be  meeting  O.S.H.A.  and  GSA  standards 
(see  Appendix  A  for  tests) .  Nothing  in  the  room  normally  generates 
toxic  fumes. 

5.5.2  Basic  hazards. 

5. 5. 2.1  Simulator  installation.  The  simulator  frame  is  anchored  in 
the  floor  of  a  rectangular  concrete  lined  pit,  which  is  set  against 
one  wall  of  the  room.  The  pit  is  approximately  10  ft  sq.  and  8^  ft. 
deep.  The  top  of  the  pit  is  covered  by  heavy,  metal  "egg  crate" 
style  grates,  except  for  the  area  through  which  the  simulator  frame 
projects.  There  is  access  to  the  simulator  on  all  sides.  The  grate 
is  a  hazard  to  individuals  wearing  high-heeled  shoes,  i.e.,  shoes 
with  small  heel  ground  contact  area.  All  the  hydraulic  components 
used  to  power  the  simulator  are  located  in  the  pit. 

5. 5. 2. 2  Simulator  structural  integrity.  The  physical  failure  of 
the  simulator  is  a  possibility.  The  probability  of  its  occurrence 
was  established  by  an  independent  consultant,  Charles  S.  Stanton, 
Structural/Kinematics  of  Troy,  Michigan.  The  analysis  included 
brittle  lacquer  techniques  followed  by  strain  gauging  in  those  areas 
identified  by  the  brittle  lacquer  as  highly  stressed.  The 
conclusion  drawn  by  the  consultant  firm  was  the  probability  of 
structural  failure  (in  the  hour  of  operation  following  the  accrued 
test  hours)  was  less  than  10'’. 

5. 5. 2. 3  Simulator  operating  hardware.  The  two  motors  which  power 
the  system  are  drip-proof,  fan-cooled  motors  that  operate  well 
within  their  respective  ratings.  The  hydraulic  components,  hoses, 
and  tubing  are  all  industrial  quality,  rated  for  operating  pressures 
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RIDE  MOTION  SiMUUTOR 


Ride  Motion  Simulator 
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Figure  5-2 ,  CAMAC  System  and  Control  Console 
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HYDRAULIC  CONTIiOl  PANEL 
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Figure  5-8.  Vertical  Electronic  Control  Panel 
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Hydrtiteeh 


Figure  5-9.  CAMAC  Hazard  Control  Panel  ( 
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up  to  3000  psi.  Catastrophic  failure  of  hoses,  hose  ends,  tubing, 
tube  fittings  or  valves  is  very  remote.  Further,  catastrophic 
failures  (such  as  hose  tubing  breaks)  are  usually  preceded  by  small 
scale  leaking  or  mechanical  deformation  for  a  substantial  length  of 
time.  To  guard  against  the  above,  visual  inspections  will  be 
conducted  prior  to  the  initiation  of  a  test  program  and  at  periodic 
intervals  during  testing  (see  the  User's  Manual  for  the  Ride  Motion 
Simulator) .  Leaking  components  will  be  repaired  or  replaced,  as 
necessary.  The  reservoir  (200  gallons)  is  baffled  and  vented  to  the 
atmosphere.  Servo  valve  sticking,  as  a  result  of  dirt  in  the  oil, 
is  also  a  possibility.  Two  filter  banks  of  four  filters  each  are 
provided  in  the  system,  one  specifically  to  protect  the  vertical 
axis  motion.  The  condition  of  the  filters  is  monitored  by  the 
pressure  drop  across  the  filters.  The  filter  elements  will  be 
replaced  as  required. 

Because  of  the  remote  probability  of  failure  of  the  hydraulic 
components  and  reservoir,  there  is  no  shielding  surrounding  the 
hydraulic  equipment. 

5. 5. 2. 4  Hydraulic  system  failures.  Power  loss  to  the  main 
hydraulic  pump  and  coolant  pump  is  a  possibility  but  is  not  a 
hazard.  Essentially,  loss  of  power  to  the  main  pump  would  cause  the 
simulator  to  coast  to  a  stop.  Oil  delivery  from  the  pump  would  stop 
almost  instantly,  but  the  system  would  continue  to  receive  oil  from 
the  accumulators  for  a  short  period  of  time  at  ever  decreasing 
pressure.  Ultimately,  the  residual  pressure  would  be  equal  to  pre¬ 
charge  pressure,  but  the  flow  rate  would  be  "zero."  Power  loss  to 
the  coolant  pump  would  result  in  unchecked  heat  build-up  in  the 
system  working  fluid.  However,  the  heat  absorbing  capacity  of  the 
reservoir,  approx.  200  gallons  of  oil,  is  very  large  and  the  power 
utilization  of  the  system  so  low  that  heat  build  up  would  occur  very 
slowly  and  would  be  readily  observable  on  the  system  temperature 
gauge  long  before  it  became  dangerous.  The  reservoir  is  baffled  and 
vented  to  the  room  atmosphere.  Normal  operating  temperature  of  the 
system  ranges  from  room  temperature  to  120 °F.  The  oil-to-water 
coolant  system,  used  to  maintain  or  reduce  the  temperature  of  the 
working  fluid,  is  activated  manually  when  the  maximum  temperature  is 
reached.  Loss  of  coolant  water  flow  or  other  coolant  system 
breakdown  results  in  the  same  slow  increase  in  working  fluid 
temperature  as  described  above,  thus  giving  adequate  warning  for 
shut  downs.  Both  electrical  and  oil  fires  are  possible  but  are 
considered  remote. 

5. 5. 2. 5  Electrical  system  failure.  All  electrically  operated 
equipment  in  the  pit  are  of  industrial  quality  and,  thus,  benefit 
from  the  regulations  governing  the  safety  of  such  equipment .  The 
equipment  functions  normally  even  when  wet  with  oil.  The  electric 
motors  are  protected  from  internal  contamination  from  anything 
except  sprays  directed  from  underneath.  Finally,  the  low-operating 
temperature  of  the  working  fluid  and  its  low  volatility  lessens  the 
fire  hazard. 

5. 5. 2. 6  Control  console  fire.  Control  console  fire  is  a 
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possibility;  however,  it  is  minimized  by  using  only  industrial-rated 
devices  operating  within  their  rated  capacity.  Further,  the 
installation  of  console  equipment  is  carried  out  in  accordance  with 
best  practice.  In  the  event  a  fire  should  occur  in  the  console  or 
the  pit  area,  manually  operated  fire  extinguishers  rated  for  Class  A 
and  Class  B  &  C  fires  are  within  10  feet  of  the  console. 

5. 5.2. 7  Pneumatic  system  failures.  The  pneumatic  system  is  an 
independent  network  of  automatic  and  manual  safety  shutdown  devices 
which  provides  backup  to  electrical  shutdown  circuits.  But  it,  too, 
has  the  possibility  of  failing.  Loss  of  air  pressure,  brought  on  by 
a  major  leak  or  a  stoppage  of  the  supply,  triggers  a  system  shutdown 
and  thus  is  considered  a  safe  event.  The  system  is  comprised  of 
several  elements  among  which  are  travel-limit  switches  for  vertical 
motion  on  the  simulator.  Should  the  simulator,  for  any  reason, 
exceed  the  excursion  limits  defined  by  the  switches,  the  tripping  of 
a  switch  will  initiate  a  system  shutdown.  If  a  limit  switch  is 
tripped  but  fails  to  initiate  a  system  shutdown,  electrical  backup 
systems  are  in  place  which  are  designed  to  perform  the  same  function 
by  sensing  other  indicators  of  motion.  However,  an  over-travel 
situation  does  not  necessarily  define  an  occupant  injury.  Three 
manual  switches  are  in  the  system  intended  for  occupant  use.  Two 
are  of  the  "press-to-activate"  type,  and  the  third  is  a  "release-to- 
activate"  or  "dead-man's"  switch.  The  switches  can  be  used  in  an 
either-or  arrangement,  depending  on  the  type  of  test  being 
performed.  Activation  of  the  switches  means  that  the  occupant  is, 
or  perceives  to  be  in  a  threatening  situation  and,  thus,  their 
functioning  correctly  is  important.  In  the  event  they  are  activated 
but  fail  to  shut  down  the  system,  the  system  operator  must  recognize 
the  failure  of  the  switches  to  work  and  initiate  a  shutdown. 
Malfunctions  of  switches,  due  to  contaminated  air,  are  minimized  by 
passing  the  air  supply  through  a  filter  and  water  separator  before 
entering  the  system.  The  occurrence  of  breaks  are  minimized  by 
scheduled  inspections  of  the  systems. 

5. 5. 2. 8  Electronic  system  failures.  The  electronic  system  could  be 
a  problem  if  bad  data  or  noise  are  input  to  the  servos.  However, 
electronic  equipment  is  highly  reliable  under  normal  operating 
conditions,  so  failure  is  remote.  Following  is  a  breakdown  of  the 
electronic  system. 

°  CAMAC  system.  There  are  essentially  two  things  which  could 
cause  a  problem: 

-  a  failure  of  the  output  circuitry,  or 

-  a  bad  data  file  ("bad"  meaning  the  data  would  cause 
unacceptable  G  forces  or  exceed  the  travel  limits) . 

The  main  cause  of  failure  to  circuitry  is  excessively  high 
temperatures.  The  room  is  air-conditioned  and  the  CAMAC  system 
has  an  internal  cooling  fan.  Also,  before  a  test  is  run,  the 
output  data  going  to  the  electronic  conditioning  modules  is 
monitored  on  a  strip  chart  recorder.  This  will  reduce  the 
chance  of  a  failure  occurring  during  a  test  to  extremely 
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improbable . 

All  data  files  will  be  checked  by  the  CAMAC  computer  programmer 
for  continuity  before  they  are  output.  This  will  safeguard 
against  large  G  forces  by  not  allowing  any  large  instant 
position  change. 

°  The  electronic  conditioning  modules.  These  modules  are 
specifically  designed  for  passing  electric  signals  to  hydraulic 
systems .  These  modules  are  of  industrial  quality  and  thus 
benefit  from  the  regulations  governing  the  safety  of  such 
equipment . 

°  Position  feedback  instruments.  All  actuators  on  the  RMS 
have  their  positions  electrically  measured.  Pitch  and  vertical 
use  a  LVDT  (Linear  Variable  Differential  Transducer)  while  roll 
and  yaw  use  electrical  potentiometers.  The  LVDT  is  a  highly 
reliable  instrument  and  should  never  fail.  The  potentiometers 
will  be  checked  according  to  a  routine  maintenance  schedule  and 
replaced  as  necessary.  This  will  lower  the  probability  of 
failure  occurring  during  a  test. 

5. 5.2. 9  System  response.  The  low  dynamic  bandwidths  of  the  Ride 
Motion  simulator  provide  a  safety  feature  in  itself.  The  bandwidths 
of  the  four  degrees  of  motion  are: 

VERTICAL  5.5  Hz 

ROLL  8.2Hz 

PITCH  9.0  Hz 

YAW  1 . 0  Hz 

Bode  plots  from  closed-loop  test  are  included  in  Appendix  B.  The 
low  bandwidths  will  help  to  prevent  sudden  spikes  from  occurring. 
Even  if  a  spike  were  input  to  the  system,  the  simulator  could  not 
reproduce  it,  thus  preventing  injury  and  damage. 

5.5.2.10  Seating  configurations.  The  Ride  Motion  Simulator  has  the 
capability  to  accomodate  a  wide  variety  of  seating  configurations. 
All  seats  used  on  the  RMS  will  be  equipped  with  seat  belts  and/or  a 
shoulder  harness.  The  simulation  used  to  recreate  seat  motion  takes 
into  account  the  spring  mass  system  of  the  vehicle. 

5.5.3  System  hazard  analysis.  The  following  pages  outline  specific 
failures,  hazard  probabilities  and  severity  and  provide  a  flow-chart 
showing  related  backup  systems. 
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SUBJECT  PROGRAM  CAUSE  EFFECT  HAZARD  HAZARD  RAC  COMMENTS 

lAZARD  OR  PHASE  SEVERITY  PROBABILITY  CORRECTIVE  ACTION/MINIMIZING  PROVISIONS 
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>il  leakage  operation  and  poor  seals,  etc.  spray  of  hydraulic  routine  shutdown  procedures  roust  proceed  so  that  repairs  can  be  made.  Small  scale 

shutdown  oil  leaks  would  have  no  impact  on  hydraulic  system  performance.  The  presence  of  wet 

oil  films  pose  minor  threat  of  fire  if  exposed  to  open  flames  or  sparks  due  to 
the  high  flashpoint  of  the  oil  (395®F) . 
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APPENDIX  A 


A-1 


A-2 


DISPOSITION  FORM 

For  UM  O*  thi«  form,  tM  AH  340-15.  tb*  proponont  agincy  •!  T AGO. 


Tji/  THRU  C,  Safety  Ofc  FROW  Industrial  Hygienist  date  4  jjov  87  CMT  1 

(AMSTA-CZ)  (HSXP-WAR)  Mr.  3onkowski/gpl/4-6256 

to  C,  Sys  Sim  &  Tech  Div  / 

(AMSTA-RY) 

1.  At  the  request  of  Mr.  Paul  Spanski,  an  Illumination  and  Noise  Survey  was  conducted  in 
Bldg  215,  RMS  Bay  (Ride  Motion  Simulator)  on  2  Nov  87  by  the  writer. 

2.  Test  results  are  on  the  attached  Data  Sheet. 

3.  Findings: 

a.  The  illumination  level  at  the  computer  table  and  control  console  is  below  the  GSA 
Illumination  Standard  of  50  Foot-candles. 

b.  Excessive  noise  levels  were  not  found  at  this  time. 

4.  Recommendation; 

a.  Replacement  of  the  fluorescent  lights,  and  cleaning  of  the  fluorescent  light  lens. 

b.  Request  a  reevaluation  of  the  illumination  levels  by  the  Occupational  Health  Clinic 
upon  completion  of  cleaning  and  repair  of  lighting  fixtures. 


Atch  KENNETH  BONKOWSKI 

Industrial  Hygienist 


CF: 

CPT  D.  Ellis 
(HSXP-SEL) 


HEFEHENCE  OR  OFFICE  SYMBOL 

.iSXP-WAR  (385-lOi) 


SUBJECT 

Noise  and  Illumination  Survey  -  Building  215 


Bruno  Burgess,  M.D. 
(HSXP-WAR) 


ILLUMINATION  AND 
NOISE  DATA  SHEET 

Building  215,  RMS  Bay 
3  NOV  87 


TEST  # 


LOCATION 


ILLUMINATION 
LEVEL  -  FOOT-CANDLES 


1 

2 

3 


GSA  ILLUMINATION  STANDARD  50 

Computer  Table  42 

Control  Console  32  -  39 

Center  of  Room  48 


TEST  # 


LOCATION 


NOISE  LEVEL, 
dbA 


O.S.H.A.  PERMISSIBLE  EXPOSL*R£ 

LIMIT 

85 

1 

At  Computer  Table 

76 

2 

AT  Control  Console 

80 

3 

Next_to  RMS  at  floor 

level 

83 

4 

Door  way 

75 

'n.CH  #1 


A-4 


DISP«>SITION  FORM 

for  u««  of  this  form,  too  AR  340-lS.  th*  propOn«r>1  t^cy  it  TAGO. 


1  REFERENCE  OR  OFFICE  SYMBOL 

SUBJECT 

j  .SXP-WAR  (385-lOi) 

Illumination  Re-Survey,  Bldg  215 

79 


TO 


C,  Safety  OFc 
(AiMSTA-CZ) 


FROM 


C,  Sys  Sim  &  Tech  Div 
(AMSTA-RYA) 


/ 


Industrial  Hygienist 
(HSXP-WAR) 


1  Apr  88  cmt  1 

nr.  Bonkowski/gpl/4-6256 


1.  At  Mr.  A.  Reed's  request,  the  illumination  levels  in  Bldg  215,  Ride  Motion  Simulator 
(RMS)  room,  were  re-measured  by  the  writer  on  01  Apr  88. 


2.  The  test  results  are  on  the  enclosed  Data  Sheet. 

3.  Findings: 

The  present  illumination  levels  in  the  RMS  room  exceed  the  value  recommended  by  the 
Illumination  Engineering  Society  for  ordinary  seeing  tasks  (see  enclosed  Table  I,  General 
Recommended  Values  of  Illumination) . 

4.  No  further  corrective  action  is  recommended. 


Ends 


CF: 

CPT  D.  Ellis 
(HSXP-SEL) 

Dr.  B.  Burgess 
(HSXP-WAR) 

Ms.  D.  Jones,  R.N. 
(HSXP-WAR) 


KENNETH  J.  BONKOWSKI 


Industrial  Hygienist 


Ms.  S.  Wessel,  R.N. 
(HSXP-SEL)  • 


ILLUMINATION  DATA  SHEET 
BUILDING  215,  RMS  ROOM 
01  APR  88 


LOCATION 


ILLUMINATION 

FOOT-CANDLES 


ILLUMINATING  ENGINEERING  SOCIETY  STANDARD 

FOR  ORDINARY  SEEING  TASKS  30 


Computer  Table  41 

Control  Console  37-39 


Work  Bench 


38 


tion  will  be  maintained  even  where 
maintenance  conditions  are  favorable, 
it  is  necessary  to  design  the  system  to 
give  initially  more  light  than  the  rec¬ 
ommended  in-service  level.  The  system 
should  be  designed  initially  at  least 
50%  above  the  in-service  level.  'Where 
safety  goggles  are  worn,  the  light 
reaching  the  eye  is  liJcely  to  be  ma¬ 
terially  reduced,  and  the  level  of 
lighting  should,  therefore,  be  increased 
in  accordance  with  the  absorption  of 
the  gaggle  in  use.  It  is  important  that 
the  quantity  of  light  be  measured  at 
the  point  and  in  the  plane  at  which  the 
seeing  task  is  performed,  be  it  horizon¬ 
tal,  vertical,  or  some  intermediate 
angle. 

(d)  The  Illuminating  Engineering 
Society  has  in  recent  years  been 
studying  the  illumination  needs  of 
specific  industries.  The  results  of 
those  studies  which  have  been  com¬ 
pleted  are  included  in  Table  II. 

2.2.3 — Quality  of  Lighting 
2.2.3.1 — General — (a)  The  factors  in¬ 
volved  in  quality  of  lighting  are  many 
and- complex.  Glare,  diffusion,  direction 
and  uniformity  of  distribution,  color, 
brightness  and  brightness  ratios  have 
a  significant  elTect  upon  visibility  and 
ability  to  see  easily,  accurately,  and 
quickly.  Certain  seeing  tasks  require 
much  more  careful  analysis  and  higher 
quality  lighting  than  others.  Areas 
where  the  seeing  tasks  are  casual  or 
relatively  infrequent  need  high  qnality 
lighting  much  less  than  areas  where 
the  seeing  tasks  are  severe  and  arc 
performed  over  long  periods  of  time. 
Good  appearance  of  certain  areas  also 
often  dictates  the  use  of  high  quality 
lighting  even  though  the  seeing  tasks 
in  the  area  are  not  difficult.  Lobbies, 
auditoriums,  etc.  usually  fall  into  this 
class. 

(b)  Installations  extremely  deficient  in 
lighting  quality  are  easily  recognized 
as  very  uncomfortable  and  even  harm¬ 
ful.  Unfortunately,  more  moderate  ~ 
deficiencies  are  not  readily  detected, 
although  the  cumulative  effect  of  even' 
slightly  gl.iring  conditions  can  result 
in  material  loss  of  seeing  efficiency  and 
in  undue  fatigue. 

2.2.3.2 — Direct  Glare — (a)  Glare  may 
be  defined  as  any  brightness  within 
the  field  of  vision  of  such  ch.aracter  to 
cause  discomfort,  annoyance,  interfer¬ 
ence  with  vision  or  eye  fatigue,  or 
both.  'When  the  condition  is  caused 
directly  by  the  source  of  the  lighting. 


TABLE  I. — Oeneral  Becommended  'Values  of  Illumination. 

Current  Becommended  Practice 
Pootcandles  in  Service 
(On  Task  or  30"  above  floor) 

ilOST  Dlii'lCULT  SEEKS-U  T.VSKa  I 

Fiaeit  Pr«cisioft  Work  .  200  UOO* 

lotolti&c:  Finest  Detail 
Poor  CoDtrasu 
I-«ooir  r«iiodt  of  Time 

Such  It;  Eatra-Coe  Assembly;  Prei  ision  Cr^d.it;:  Extra  floe 
FioUhibc 

VEIIT  DIFFICCLT  SEEING  TASKS 

Precision  TTork  .  100 

InroUincr  Fina  Detail 

Fair  Contrasts 

Periotls  of  Time 

Such  as:  Fine  Assembly;  lllsh  Syeed  Work;  Fioe  Finishing 
DIFFICCLT  AND  CRITICAL  SEEING  TASKS 

Prolooffed  Work  . . . . .  50 

Inrolvint:  Fins  Dstsil 

Hoderats  Contrasts 
Lone  Periods  of  Tims 

Such  St:  Ordinary  Beoih  Work  and  AtsemLly;  Machine  Shop 
Work;  Finishing  of  Medium  to  Fine  Parts;  Office 
Work 

OROINART  SEEING  TASKS 

Inrolrific;  Moderstely  Fine  Detail  . .  30 

Normal  Contrasts 
Intermitteot  Periods  of  Time 

Such  at:  Antomatic  Mschios  Operation;  Bonfh  Orindinc: 

Oarage  Work  Areas;  Switchboards;  Continoons  Proe* 
ertes;  C<*oft*renre  end  File  Rooms;  Packing  and  ship- 
pint 

CASUAL  SEEING  TASKS 

Such  as:  Stairways:  Reception  Rooms.  WashrocT.s  and  other  10 

Serrice  Areas;  Active  Storage 
ROCGH  SEEING  TASKS 

Soeh  ai:  Hallways:  Corridors;  Passafewsys:  Inactive  Storarte  S 

*Obu!ned  with  a  combination  of  flcnera)  liflhtio^  plus  specialised  supplementary  Hshtinf.  Cars 
should  be  taken  to  keep  within  the  (enersl  brightness  ratios  (indicated  in  Table  HI)  and  to 
avoid  glare  condUions  when  tisht  colored  msicriah  are  involved. 
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wheiher  natural  or  artificial,  it  is  de¬ 
scribed  as  direct  glare. 

(b)  To  reduce  direct  glare,  the  follow¬ 
ing  steps  may  be  taken; 

(1)  Decrease  the  brightness  of  light 
sources  or  lighting  equipment,  or 
both. 

(C)  Reduce  tire  area  of  high  brightness 
causing  the  glare  condition. 

(3)  Increase  the  angle  between  the  glare 
source  and  the  line  of  vision. 

(♦)  Increase  the  brightness  of  the  area 
surrounding  the  glare  source  and 
against  which  it  is  seen. 

(c)  Unshaded  windows  are  frequent 
cause  of  direct  glare.  They  may  per¬ 
mit  direct  view  of  the  sun,  bright  por¬ 
tions  of  the  sky,  and  of  bright  adja¬ 
cent  buildings.  -  Tb^  often  constitute 
large  areas  of  very  high  brightness  in 
the  normal  field  of  view.  The  condition 
may  be  contronvil  by  sli.ading  the  win¬ 
dows  with  shades,  blinds,  louvers,  or 
baffles. 

(d)  Arliflcial  lighting  luminaires  which 
are  too  bright  for  the  environment  in 
which  they  are  located  produce  direct 
glare.  To  reduce  this  glare,  direct 
general-lighting  luminnires  should  be 
mounted  at  sufficient  height  to  keep 
them  well  above  the  normal  line  of 
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vision.  They  should  be  properly  de¬ 
signed  to  limit  both  the  brightness  and 
the  quantity  of  light  e.mitted  in  direc¬ 
tions  directly  below  the  horizontal  since 
such  light  is  likely  to  be  well  within 
the  field  of  view  and  interfere  with 
vision.  There  is  such  a  wide  divergence 
of  conditions  in  industry  that  it  b 
often  necresary  to  modify  the  ideal 
luminaire  cbaracterbtics  to  meet  prac¬ 
tical  limitations  of  efficiency  and  main¬ 
tenance.  In  offices  and  in  industrial 
areas  where  similar  environmental  con¬ 
ditions  can  be  established,  a  shielded 
zone  from  horizontal  to  approximately 
45*  below  b  recommended  in  accord¬ 
ance  with  the  “Recommended  Practice 
of  Office  Lighting”*  (See  Fig.  1).  It  is 
"always  desirable  to  provide  as  large  a 
shielded  zone  as  practicable.  Ideally, 
from  See.  2.3.1,  the  brightnesses  of  the 
room  should  be  relatively  uniform  in¬ 
cluding  the  luminaire.  Thb  condition 
b  usually  difficult  to  achieve  particu¬ 
larly  with  the  direct  lighting  equip¬ 
ment  most  frequently  used  in  industry. 
Usually  the  surfaces  above  the  lighting 
equipment  and  the  upper  surraces  of 


*P'ibll9hvd  bv  the  Illuiziin»tiQ(  Encititerinit 
Society. 
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